Exam 1z0-908 topic 1 question 53 discussion

Actual exam question from Oracle's 1z0-908

Question #: 53
Topic #: 1

Which two queries are examples of successful SQL injection attacks? (Choose two.)

A. SELECT user,passwd FROM members -
WHERE user = ‘?’;INSERT INTO members(‘user’,’passwd’) VALUES (‘[email protected]’,‘secret’);--‘;
B. SELECT id, name FROM user WHERE user.id=(SELECT members.id FROM members);
C. SELECT id, name FROM user WHERE id=23 OR id=32 OR 1=1;
D. SELECT id, name FROM user WHERE id=23 OR id=32 AND 1=1;
E. SELECT email,passwd FROM members
WHERE email = ‘INSERT INTO members(‘email’,’passwd’) VALUES (‘[email protected]’, ‘secret’);--‘;
F. SELECT user, phone FROM customers WHERE name = ‘\; DROP TABLE users; --‘;

Show Suggested Answer

Suggested Answer: DE 🗳️

by marklv at Sept. 2, 2023, 1:50 a.m.

Submit Cancel

6 months, 4 weeks ago

Selected Answer: AE

F only possible if session has all privileges;

upvoted 1 times

...

7 months, 3 weeks ago

Selected Answer: AC

A and C

upvoted 1 times

...

11 months, 1 week ago

E and F, the other two don't write to the database. A might be valid. Injection is a query inside another query.

upvoted 1 times

...